
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa
File: ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa (raw, json)
Hash identifier: j339wxpk44xEsFmsDTbmlygJf2JihqfkTKDXE7ViS+M=
Subject key identifier: CA:B1:6D:E2:0C:E5:41:47:8E:AE:7E:0E:E3:F5:D6:24:96:2C:EB:2F
Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial: 010D0C9F4328584EA7934837207AC4FC3C29F800
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14618
IP address blocks: 216.139.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:93:48:37:20:7a:c4:fc:3c:29:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=060ce4a9-93d9-4c16-a09a-ce6fb6241171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:b9:bc:02:cc:e0:98:60:92:67:d1:50:4b:
c2:ab:36:33:df:b0:10:f7:3f:4a:ad:c8:7e:4e:1f:
83:d5:00:f2:3f:8f:11:d5:f4:ba:de:f3:6a:ff:59:
32:dd:c6:92:36:fd:e8:be:7f:89:ed:13:85:33:35:
f4:69:2d:8e:a8:21:88:82:3d:c9:67:99:88:a2:96:
b4:20:f0:4f:3f:f0:e7:2b:20:31:e8:88:c1:cf:49:
fb:eb:12:c0:bd:f3:d7:4c:fa:d3:dc:0f:12:9d:1f:
b5:72:4e:16:df:cc:01:58:13:35:4c:44:57:02:e0:
55:59:6b:36:75:ab:75:9c:33:5a:5d:09:07:ed:2d:
0e:4f:6b:46:6a:83:f0:09:0f:9e:b0:81:08:b5:7e:
ca:f7:d2:d7:cd:eb:fe:7e:60:ce:e8:05:5a:cf:f8:
2a:c6:75:a8:d6:02:dd:6b:ce:bf:77:3f:bd:ff:51:
48:13:53:00:ff:da:c5:d6:77:6e:e3:78:68:1d:60:
2d:8d:96:f9:36:17:a7:db:5a:e3:01:62:41:65:4c:
c5:27:42:01:95:96:32:53:de:22:89:d1:5c:d7:9f:
7f:25:0b:65:c6:c3:80:dc:a4:2b:21:48:b4:56:3c:
ab:86:26:41:b7:e0:cc:42:85:74:b8:b6:53:3d:8f:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B1:6D:E2:0C:E5:41:47:8E:AE:7E:0E:E3:F5:D6:24:96:2C:EB:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/ac9c6811-f8d5-31d1-9591-ef0f43b27229.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
X509v3 Authority Key Identifier:
keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.139.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:75:49:88:44:9a:80:b4:bc:29:dc:89:4c:61:4b:c1:ed:05:
95:fc:48:25:f0:fe:0a:97:04:62:d5:ad:36:42:16:6a:b0:cc:
e3:11:ec:dd:78:27:3c:ef:cd:a1:8e:e7:e3:c9:67:87:3a:94:
c2:03:dd:64:38:a6:45:b9:5d:df:0c:fb:f9:00:e4:58:63:58:
9a:c6:b8:67:93:74:b1:b9:6c:d3:d9:ee:78:03:a0:42:ee:a3:
5c:f2:8f:07:c7:ed:48:46:a0:8f:2b:a8:9c:19:b6:4c:6c:1d:
a6:94:e1:a2:94:ae:30:77:30:c7:67:ae:1a:2f:7f:55:f8:e8:
ab:d2:a2:bb:ab:02:b8:1f:05:70:7d:2b:b7:e4:be:53:2d:6c:
b4:a9:d6:b4:1f:f3:6f:64:6e:65:a2:17:98:d6:0a:1e:cd:03:
30:73:76:26:96:f5:2a:11:aa:21:00:de:c5:67:ec:b3:a1:11:
69:66:8b:06:b9:ac:86:80:48:59:17:22:b2:72:0a:66:4b:d2:
64:08:b8:41:73:e1:5e:07:2c:47:c0:d4:ac:5b:41:7c:f3:58:
1b:db:8c:6d:23:83:33:2c:95:32:7d:9a:7b:da:ac:92:07:fa:
2d:1e:5e:9e:60:de:3a:be:0f:37:97:12:fd:55:54:2f:75:48:
a3:33:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:17 2026 by rpki-client